Fossil

Check-in [c66b038cae]
Login

Many hyperlinks are disabled.
Use anonymous login to enable hyperlinks.

Overview
Comment:Do not give unnecessary clues to user anonymous (which is the login used by most attack robots) that something has gone wrong inside of Fossil.
Downloads: Tarball | ZIP archive
Timelines: family | ancestors | descendants | both | trunk
Files: files | file ages | folders
SHA3-256: c66b038cae2a45d42b38cdd3e3a697999d1e0f7799ed088fecc644c981b6f53e
User & Date: drh 2025-07-09 13:46:19.046
Context
2025-07-09
13:52
Update the built-in SQLite to a version that fixes a possible UAF following OOM. check-in: a6d506ecc4 user: drh tags: trunk
13:46
Do not give unnecessary clues to user anonymous (which is the login used by most attack robots) that something has gone wrong inside of Fossil. check-in: c66b038cae user: drh tags: trunk
13:01
Fix the non-standard %q format specifier in Fossil's custom printf() implementation so that the precision refers to the number of input characters, not the number of output characters. check-in: 0971536165 user: drh tags: trunk
Changes
Unified Diff Ignore Whitespace Patch
Changes to src/printf.c.
1156
1157
1158
1159
1160
1161
1162

1163

1164
1165





1166
1167

1168
1169
1170
1171
1172
1173
1174
  }
  else
#endif
  if( g.cgiOutput==1 && g.db ){
    g.cgiOutput = 2;
    cgi_reset_content();
    cgi_set_content_type("text/html");

    style_set_current_feature("error");

    style_header("Bad Request");
    etag_cancel();





    @ <p class="generalError">%h(z)</p>
    cgi_set_status(400, "Bad Request");

    style_finish_page();
    cgi_reply();
  }else if( !g.fQuiet ){
    fossil_force_newline();
    fossil_trace("%s\n", z);
  }
  return rc;







>
|
>


>
>
>
>
>
|
|
>







1156
1157
1158
1159
1160
1161
1162
1163
1164
1165
1166
1167
1168
1169
1170
1171
1172
1173
1174
1175
1176
1177
1178
1179
1180
1181
1182
  }
  else
#endif
  if( g.cgiOutput==1 && g.db ){
    g.cgiOutput = 2;
    cgi_reset_content();
    cgi_set_content_type("text/html");
    if( g.zLogin!=0 ){
      style_set_current_feature("error");
    }
    style_header("Bad Request");
    etag_cancel();
    if( g.zLogin==0 ){
      /* Do not give unnecessary clues about a malfunction to robots */
      @ <p>Something did not work right.</p>
      @ <p>%h(z)</p>
    }else{
      @ <p class="generalError">%h(z)</p>
      cgi_set_status(400, "Bad Request");
    }
    style_finish_page();
    cgi_reply();
  }else if( !g.fQuiet ){
    fossil_force_newline();
    fossil_trace("%s\n", z);
  }
  return rc;